[cap-talk] Why tokens have short lifetimes in OAuth-WRAP

[Karp, Alan H]

I just got a response to

> Why do the servers need to continually check?  Can't they wait until they
> need to use the token before checking?

"Yes.  Some systems need to optimize this check, and it's much easier to optimize if the tokens are short-lived.  Bloom filters and cryptography both come in useful."

I don't understand it at all.  Any ideas what he's talking about?

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp